]> pilppa.com Git - linux-2.6-omap-h63xx.git/commit
xfrm: fix fragmentation on inter family tunnels
authorSteffen Klassert <steffen.klassert@secunet.com>
Mon, 6 Apr 2009 03:58:50 +0000 (03:58 +0000)
committerDavid S. Miller <davem@davemloft.net>
Tue, 7 Apr 2009 00:07:59 +0000 (17:07 -0700)
commitd1d88e5de491f7b0862a0adaed427211c0e4a0a6
tree4706cb6a58d60c9061203f788e074c531fb5362d
parent10fd9d7ec48194754de6497ded2ef53cbd2c313e
xfrm: fix fragmentation on inter family tunnels

If an ipv4 packet (not locally generated with IP_DF flag not set) bigger
than mtu size is supposed to go via a xfrm ipv6 tunnel, the packetsize
check in xfrm4_tunnel_check_size() is omited and ipv6 drops the packet
without sending a notice to the original sender of the ipv4 packet.

Another issue is that ipv4 connection tracking does reassembling of
incomming fragmented packets. If such a reassembled packet is supposed to
go via a xfrm ipv6 tunnel it will be droped, even if the original sender
did proper fragmentation.

According to RFC 2473 (section 7) tunnel ipv6 packets resulting from the
encapsulation of an original packet are considered as locally generated
packets. If such a packet passed the checks in xfrm{4,6}_tunnel_check_size()
fragmentation is allowed according to RFC 2473 (section 7.1/7.2).

This patch sets skb->local_df in xfrm6_prepare_output() to achieve
fragmentation in this case.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/xfrm6_output.c